IT Audit Associate: Risk, Controls & Compliance

Hong Kong Exchanges and Clearing Limited (HKEX); Hong Kong; On-site; HKD 500,000 - 800,000; Full time

Job summary

HKEX is Asia's dynamic exchange group seeking an Associate, IT Audit to perform high-quality IT audits for the Group in line with GIA’s methodology, reporting to the Head of IT Audit.

You will deepen knowledge of the Group’s strategy, risk processes and platforms, stay current with IT trends, and provide insights to improve the control environment for senior management and regulators.

Qualifications

• University degree in disciplines such as Accounting, Finance, Business Administration or Technology.
• Professional qualifications such as CPA, CIA, CFA, FRM, CISA, CISM, CISSP, CEH, CCSP / CCAK, CSX-P or similar.
• Solid understanding of cybersecurity standards like NIST CSF, ISO 27001, CIS.
• Knowledge of IT security risks, controls, databases, cloud, networks and operating systems.
• Strong team orientation, accountability, and ability to multi-task.
• Excellent communication and relationship management skills.
• Experience leveraging data and technology is advantageous.

Responsibilities

• Independently conduct risk-based audits.
• Identify and elevate potential audit issues and root causes.
• Contribute to continuous risk monitoring and assessment of IT / business operations.
• Develop knowledge of Group strategy, risk processes and operating platforms.
• Stay current of industry development and IT trends to enhance audit coverage.
• Validate remediation of audit issues in a timely manner.
• Participate in initiatives to improve audit methodology.
• Support preparation of materials for senior management, Audit Committee and regulators.

Education

University degree in Accounting, Finance, Business Administration or Technology

Tools

CPA

CIA

CISA

CISM

CISSP

CEH

CCSP / CCAK

CSX-P

Job description

HKEX is Asia's dynamic exchange group seeking an Associate, IT Audit to perform high-quality IT audits for the Group in line with GIA’s methodology, reporting to the Head of IT Audit.

You will deepen knowledge of the Group’s strategy, risk processes and platforms, stay current with IT trends, and provide insights to improve the control environment for senior management and regulators.